diff --git a/CHANGELOG.md b/CHANGELOG.md
index cb58c0c9..b2339518 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,7 +6,8 @@ In Development
 
 Package updates:
 
-* Nextcloud updated to v23.0.12 (and its apps also updated).
+* Nextcloud updated to 23.0.12 (and its apps also updated).
+* Roundcube updated to 1.6.1.
 
 Control panel:
 
diff --git a/setup/webmail.sh b/setup/webmail.sh
index 274f7506..db7e31aa 100755
--- a/setup/webmail.sh
+++ b/setup/webmail.sh
@@ -35,8 +35,8 @@ apt_install \
 #   https://github.com/mstilkerich/rcmcarddav/releases
 # The easiest way to get the package hashes is to run this script and get the hash from
 # the error message.
-VERSION=1.6.0
-HASH=fd84b4fac74419bb73e7a3bcae1978d5589c52de
+VERSION=1.6.1
+HASH=0e1c771ab83ea03bde1fd0be6ab5d09e60b4f293
 PERSISTENT_LOGIN_VERSION=bde7b6840c7d91de627ea14e81cf4133cbb3c07a # version 5.2
 HTML5_NOTIFIER_VERSION=68d9ca194212e15b3c7225eb6085dbcf02fd13d7 # version 0.6.4+
 CARDDAV_VERSION=4.4.3